Microsoft Office Vulnerability Most Common Hacker Target

Malicious attachment launches provides the ability to deploy further malware

By By Dan Hounsell


As healthcare systems continue strengthening IT security against cyber attacks and the federal government issues guidance to support their efforts, information is emerging about the most common targets of hackers looking for valuable patient data and other information.

The most frequent exploit in the last three months caught by HP Sure Click was against an older, unpatched memory corruption vulnerability in Microsoft Office, accounting for nearly 75 percent of all exploits in the fourth quarter of 2020, according to a recent threat insights report from HP Bromium as reported by Health IT Security.

CVE-2017-11882, found in Equation Editor, is a memory-corruption vulnerability that can allow an attacker to execute remote code on vulnerable devices after the victim opens a malicious document typically sent in a phishing email. The malicious attachment launches the exploit and provides the ability to deploy further malware. Microsoft has provided a software update to eliminate the risk, but these unpatched systems are leaving the door open to attacks.



March 19, 2021


Topic Area: Information Technology


Recent Posts

Cyberattack Results in Patient Reroutes at Anne Arundel Medical Center

A recent cyberattack on Luminis Health Care led to care disruptions and treatment cancelations at Maryland hospital.


Tangram Furnishes Be Well OC Irvine Behavioral Health Campus

Case study: Through a public-private partnership, Be Well OC’s 22-acre Irvine campus expands Orange County’s continuum of behavioral healthcare.


Suntree Internal Medicine Reports Data Breach

Suntree Internal Medicine has no evidence of misuse, or attempted misuse, of any potentially affected information.


Why Healthcare Facilities Management Is Critical to Patient Safety 

Hospitals and other healthcare facilities rely on much more than doctors and nurses to keep patients safe.


Sanford Health and North Memorial Health Finalize Partnership

An integration process is underway to create a unified organization.


 
 


FREE Newsletter Signup Form

News & Updates | Webcast Alerts
Building Technologies | & More!

 
 
 


All fields are required. This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.